OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Peter Pentchev (roamorbitel.bg)
Date: Tue Jul 03 2001 - 10:42:06 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Tue, Jul 03, 2001 at 07:23:58PM +0400, Magdalinin Kirill wrote:
    > Hello,
    >
    > can anyone explain what the following system
    > console messages might mean:
    >
    > Jun 29 19:43:34 myserver ftpd[4429]: /etc/pwd.db:
    > No such file or directory
    > Jun 30 15:12:12 myserver ftpd[4961]: /etc/pwd.db:
    > No such file or directory
    >
    > In the /var/log/ftpd.log they are among normal user commands
    > (as they look to me)
    >
    > The box is 4.1 release, some users can access it via ftp
    > and have their own cgi-bin directories.

    If you allow anonymous user logins, or some of your users are
    chroot'd during ftp logins, then this means that somebody
    has logged in, has been successfully chroot'd, and has tried
    to retrieve an /etc/pwd.db file from within a chroot environment,
    where you have probably not put such a file :)

    G'luck,
    Peter

    -- 
    I had to translate this sentence into English because I could not read the original Sanskrit.
    

    To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message